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(54) Remotely obtaining temporary exclusive control of a printing device 



(57) Obtaining exclusive control of a printing device 
by deferring printing of print data in a print queue. To 
obtain control, the recipient performs a process which 
may include authentication of the recipient. Control may 
be obtained either before the recipient is authenticated 
or after a successful authentication process. After the 
recipient has obtained control, print data in the print 



queue is temporarily deferred from being printed. The 
recipient may then select a print job to print, including 
selecting a print job from among the print jobs deferred 
in the print queue, or selecting a file to print over a net- 
work, including the Internet or an intranet. Further, print- 
ing device resources utilized in printing data during the 
period of exclusive control may be tracked and correlat- 
ed to the recipient who has control. 
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Description 

[0001] The present invention concerns obtaining tem- 
porary exclusive control of printing devices. More par- 
ticularly, the present invention relates to systems in 
which a recipient obtains control of a printer, either by 
being authenticated or in the absence of authentication. 
After the recipient gains control, the printer appears 
"busy" for other printer requests and the recipient can 
select print jobs to print, including selecting print jobs 
over a network. 

[0002] When printing print jobs to a printer, once the 
print jobs are printed out, a recipient must go to the print- 
er in order to retrieve the hardcopy printout. Often, upon 
arriving atthe printerto retrieve his printout, the recipient 
discovers that his hardcopy printout is not there. This 
may be because the recipient's print job is still pending 
in the print queue behind other print jobs, or because 
the print job may have been accidentally or intentionally 
taken by someone else. A similar problem arises with 
regard to facsimile transmissions. To address this prob- 
lem, systems have been contemplated that defer print- 
ing a print job or a facsimile transmission until the recip- 
ient is present at the printer/facsimile. 
[0003] One method of deferring printing of a facsimile 
transmission is known with regard to a Canon Laser 
Class 7000/7500 facsimile machine. This facsimile ma- 
chine defers printing a transmission received by the fac- 
simile machine by storing the transmission in a confi- 
dential electronic mailbox. The data is held in the mail- 
box until a person having the proper mailbox code ar- 
rives at the facsimile machine and enters the proper 
code to retrieve the data from the mailbox. Once the 
proper mailbox code has been entered, the transmis- 
sion is printed by the facsimile machine. 
[0004] One method of deferring printing in printers is 
to require recipient authentication in order for the print 
job to be printed. Co-pending U.S. Patent Application 
No. 09/411,665 entitled "Authenticated Secure Print- 
ing", filed October 4, 1999, corresponding to EP-A- 
1 091 275 the contents of which are hereby incorporated 
by reference into the subject application as if set forth 
herein in full, describes a method of requiring recipient 
authentication in orderto print secure documents. Brief- 
ly, the application describes a method where a user pro- 
vides unique identification information that is submitted 
with a print job to a print node. Upon receiving the print 
job and unique identification information, the print node 
encrypts the print job and stores it in a secure manner. 
In order to retrieve the secure print job from the printer, 
a person having the proper authentication information 
provides this information to the printer whereby the 
printer processes and prints out the print job. 
[0005] Another method of deferring printing of a doc- 
ument until receiving recipient authentication has been 
described in U.S. Patent No. 5,633,932 to Davis et al. 
According to the patent, a print job and a header are 
senttoaprintnodein encrypted format. If the document 



is considered to be "sensitive", then an indication that 
the document is sensitive is placed in an electronic 
header identifying the document as sensitive, Upon re- 
ceiving the encrypted document and header, the print 

5 node decrypts the header to determine if the document 
is sensitive; if so, the document is stored until the print 
node receives authentication from the recipient. There- 
after, the "sensitive" document is printed. 
[0006] The foregoing methods provide a way to defer 

10 printing until receiving authentication of the recipient. 
However, none of these methods addresses the further 
control of printing operations after the recipient has been 
authenticated. More particularly, in each of the foregoing 
methods, after the recipient has been authenticated, all 

is print jobs pending in the print queue before the recipi- 
ent's print job continue to print in the order they were 
received by the queue. Accordingly, the recipient has to 
wait until other print jobs pending before his are printed 
before his print job is printed. Moreover, the authenticat- 

20 ed recipient is not able to select a print job to print from 
among those pending in the queue. Additionally, if the 
recipient submits a print job after he has been authen- 
ticated, he may have to be authenticated again in order 
for the newly submitted print jobs to print. Further, the 

25 recipient is only able to print print jobs that have been 
received by the queue and is not able to manually ac- 
cess a remote storage location and download a print job 
to print. 

[0007] Additional concerns arise with regard to accu- 

30 rate accounting of resources used in printing operations, 
such as the amount and type of paper used and the 
amount of ink used. In more detail, accurate accounting 
of resources may be desired in orderto bill a particular 
department within an office or a particular person using 

35 the resources. Accounting is most commonly accom- 
plished by software in a print server that tracks print jobs 
based on who submitted the print job. However, this ac- 
counting method does not accurately reflect the actual 
recipient who is using the resources, but only identifies 

40 the sender or sending department. This becomes par- 
ticularly apparent where one department such as an ac- 
counting department, requests that another department 
such as an engineering department, send it a copy of a 
document. In this case, the sender (engineering) would 

45 be billed for resources whereas the recipient (account- 
ing) is actually using the resources. As a result, the 
sender is billed for resources that they are not using. 
[0008] The present invention addressestheforegoing 
by providing a system in which a recipient obtains ex- 

50 elusive control of a printer. While the recipient has ex- 
clusive control, print jobsthat have been orthat are sub- 
sequently submitted to a print queue of the printer are 
deferred. Meanwhile, the recipient accesses print data 
that he wants to print and submits it to the printer for 

55 printing, whereby the print data is printed ahead of the 
print jobs in the print queue. 

[0009] According to one aspect of the invention, the 
recipient obtains control of the printer by being authen- 
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ticated. Once the recipient is authenticated, all authen- 
ticated print jobs that are intended for the recipient are 
printed, or alternatively, the recipient may select which 
print jobs to print. Print jobs intended for the recipient 
are those for which the recipient's authentication is re- 
quired. Meanwhile, printing of other print jobs are de- 
ferred. 

[001 0] Thus, in one aspectthe invention allows exclu- 
sive control of a printing device to be obtained by a re- 
cipient to print data that requires authentication of the 
recipient. According to the invention, the recipient is au- 
thenticated and then provided exclusive control of the 
printing device's print capabilities. Afterthe recipient has 
been authenticated, print data not intended for the re- 
cipient is temporarily deferred while print data intended 
for the recipient is printed during a period in which the 
recipient has exclusive control of the printing device's 
print capabilities. 

[0011] As a result of the foregoing arrangement, once 
the recipient has been authenticated, print jobs intended 
for the recipient are printed out before other print jobs. 
Meanwhile, all print jobs that are not intended for the 
recipient are deferred from being printed until the recip- 
ient's print jobs have completed printing and the recipi- 
ent relinquishes control of the printing device's print ca- 
pabilities. For instance, once the recipient presents his 
authentication information and is authenticated, the 
printer appears busy to all other print jobs until the re- 
cipient's print jobs have completed printing and the re- 
cipient has relinquished control of the printer. Accord- 
ingly, the recipient can print his print jobs before others 
without waiting for the others to print first. 
[0012] The invention is not limited to being utilized in 
conjunction with printers. Rather, the invention may also 
be utilized in conjunction with any image forming device 
including facsimiles and copiers. 
[0013] Additionally, the invention provides for selec- 
tion of which print jobs to print from among a list of print 
jobs. In this regard, the recipient can select those print 
jobs that he wants to print and defer printing of the rest 
of his print jobs until a later time. For instance, if the re- 
cipient has several authenticated print jobs pending in 
the queue and he needs to have one of the print jobs 
printed immediately (perhaps because he is in a rush to 
attend a meeting), he can select the one print job from 
a list and have it printed and can then return at a later 
time to retrieve the remainder of the authenticated print 
jobs. 

[001 4] Further, the invention provides for print by ref- 
erence in which print data is stored in a remote location 
rather than in the queue, with a reference to the print 
data storage location being submitted to the queue. This 
provides for printing data from any remote location, with- 
out unnecessarily filling the queue with large amounts 
of data. 

[0015] The invention also provides for printing over 
the Internet or an intranet using an interface provided in 
the printing device. Once the recipient has obtained ex- 



clusive control of the printing device's print capabilities, 
the recipient may access print data from a remote net- 
work location, including the Internet or intranet location, 
and can print it out on the printing device. 

5 [0016] Further, the invention may track printing re- 
sources utilized by an authenticated recipient in printing 
data while the recipient has exclusive control of the print- 
ing device's print capabilities and correlates the tracked 
resources to the recipient. Tracking the resources pro- 

10 vides a way to account for the resources used by the 
recipient, such as the type and amount of paper used 
or the amount of ink used. 

[0017] In another aspect, the invention is printing im- 
ages on a printing device by obtaining control over print- 
's ing operations of the printing device, and performing a 
process to access print data to print out an image by the 
printing device during a period of control over the print- 
ing device. Obtaining control may include deferring of 
all print jobs submitted to a print queue for printing by 
20 the printing device, control over all communication in- 
terfaces of the printing device, control over network ac- 
cess to the printing device, or control over print engine 
operations of the printing device. Further, obtaining con- 
trol may include authenticating a recipient, where the re- 
25 cipient obtains control either before or afterthe recipient 
is authenticated. The process to print out an image may 
include accessing print data over a network to be printed 
by the printing device, where the network may be the 
Internet or an intranet, accessing at least one print job 
30 in a print queue, or performing a copying operation or a 
facsimile operation. 

[0018] In a further aspect, the invention is controlling 
printing operations of a printing device by obtaining con- 
trol over the printing operations of the printing device, 

35 and maintaining control over the printing operations until 
control is manually relinquished by a recipient who has 
obtained control. Obtaining control may include defer- 
ring of all print jobs submitted to a print queue for printing 
by the printing device, control over all communication 

40 interfaces of the printing device, control over network 
access to the printing device, orcontrol overprint engine 
operations of the printing device. Obtaining control may 
also include authenticating a recipient, where the recip- 
ient obtains control either before or afterthe recipient is 

45 authenticated. The recipient may perform a process to 
print out an image by the printing device while control is 
maintained over the printing device. The process may 
include accessing print data over a network to be printed 
by the printing device, where the network may be the 

so Internet or an intranet, accessing at least one print job 
in a print queue of the printing device, or performing a 
copying operation or a facsimile operation. Additionally, 
printing device resources utilized during the printing 
process may be tracked and the tracked resources cor- 

55 related to an authenticated recipient. 

[0019] This brief summary has been provided so that 
the nature of the invention may be understood quickly. 
A more complete understanding of the invention can be 
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obtained by reference to the following detailed descrip- 
tion of the preferred embodiments which are described 
by way of example only with reference to the attached 
drawings, in which: 

Figure 1 is a representative view of a networked 
computing environment in which an embodiment of 
the present invention may be implemented. 
Figure 2 is a detailed block diagram showing the 
internal architecture of the computer of Figure 1 . 
Figure 3 is a detailed block diagram of the internal 
architecture of the printer of Figure 1. 
Figure 4 is a detailed block diagram of the internal 
architecture of the server of Figure 1 . 
Figure 5 depicts one system arrangement in which 
an embodiment of the invention may be employed. 
Figures 6A is a flowchart depicting process steps 
for submitting a print job for printing. 
Figure 6B is a flowchart depicting process steps for 
a print queue insertion thread. 
Figures 6C is a flowchart depicting process steps 
for obtaining control of a printing device after au- 
thentication is successfully completed. 
Figure 6D is a flowchart depicting process steps for 
processing of a print job for printing after exclusive 
control is obtained. 

Figure 6 E is a flowchart depicting process steps for 
a print queue extraction thread. 
Figure 6F is a flowchart depicting process steps for 
obtaining control of a printing device before authen- 
tication is successfully completed. 
Figure 7 depicts an arrangement of print jobs in a 
print queue for a first example. 
Figure 8 depicts an arrangement of print jobs in a 
print queue for a second example. 
Figure 9 depicts an arrangement of print jobs in a 
print queue for a third example. 
Figures 10 through 12 depict arrangements of print 
jobs in a print queue for a fourth example. 
Figure 13 depicts an alternate system arrangement 
in which an embodiment of the invention may be 
employed. 

Figure 1 4 depicts an alternate system arrangement 
in which an embodiment of the invention may be 
employed. 

Figure 1 5 depicts a facsimile system arrangement 
in which an embodiment of the invention may be 
employed. 

Figures 1 6 is a flowchart of process steps for ob- 
taining exclusive control in the absence of authen- 
tication. 

Figure 17A depicts a printer having a display and 
keypad that may be used in practicing embodiments 
of the invention. 

Figures 17B through 17D depict the display of Fig- 
ure 1 7A providing various printing options to the re- 
cipient. 



[0020] Figure 1 provides an overall system view of a 
networked computing environment in which an embod- 
iment of the present invention may be implemented. Al- 
though the following description focuses primarily on the 

5 networked computing environment shown in Figure 1 , 
an embodiment of the present invention may be imple- 
mented in various alternative systems. For example, an 
embodiment of the present invention may be imple- 
mented in any arrangement including those shown in 

10 Figures 5 and 13 to 15. 

[0021] As shown in Figure 1 , the networked comput- 
ing environment comprises a network 1 00 which is con- 
nected to desktop computer 10, laptop computer 20, 
server 40, digital copier 30 and printer 50. Network 100 

15 is preferably an Ethernet network medium consisting of 
a bus-type physical architecture, although the invention 
can be utilized over other types of networks, including 
the Internet or an intranet. 

[0022] Desktop computer 1 0 may be an IBM PC-com- 
20 patible computer having a windowing environment such 
as Microsoft Windows 95, Windows 98 or Windows NT, 
a Macintosh workstation, a UNIX workstation, a Sun Mi- 
crosystems workstation, or virtually any workstation 
from which print jobs may be submitted for printing. For 
25 the purposes of brevity, only an IBM PC-compatible 
workstation will be described herein. As is typical with 
IBM PC-compatible computers, desktop computer 10 
preferably has a display, keyboard, mouse, floppy drive 
and/or other type of storage medium (not shown). Also 
30 attached to desktop computer 1 0 is smart card interface 
device 1 5 for interfacing with a smart card of a computer 
user, such as smart card 16. Smart card 16 therefore 
provides a mechanism whereby a computer user can 
authenticate the user's identity to desktop computer 10, 
35 printer 50 or digital copier 30. Although the use of smart 
card interface device 15 and smart card 16 are de- 
scribed herein, other mechanisms such as a hardware 
token and token reader may also be used. 
[0023] Similarto desktop computer 1 0, laptop compu- 
40 ter 20 also may be any type of laptop from which print 
jobs may be submitted for printing. However, for brevity, 
only an IBM PC-compatible computer having a window- 
ing environment such as Microsoft Windows 95, Win- 
dows 98 or Windows NT will be discussed herein. Like 
45 desktop computer 10, laptop computer 20 also has a 
display, keyboard, mouse and floppy drive or other stor- 
age means (not shown). In addition, laptop computer 20 
also has a smart card interface device 25 attached to it 
for interfacing to the smart card of a computer user such 
so as smart card 26. 

[0024] Also attached to network 1 00 are digital copier 
30 and printer 50 which are capable of receiving image 
data over network 1 00 for printing. Digital copier 30 also 
has attached smart card interface device 35 for interfac- 
es jng with the smart card of a print job recipient, such as 
smart card 36. Printer 50 likewise has smart card inter- 
face 55 for interfacing with smart card 56. 
[0025] Additionally, server 40 is connected to network 
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1 00. Server 40 may be any type of computer that func- 
tions as a server such as a Compaq Prosignia 1 600 
server. Also, server 40 may utilize any network operat- 
ing system such as Novell Netware, Windows NT, DOS, 
Windows 95/98 or UNIX. The present invention is not 
limited to any particular server type or operating system 
and may be implemented with any server and operating 
system in which print jobs are printed over a network. 
Server 40 has a storage device 41 which is preferably 
a large fixed disk for storing numerous application doc- 
ument files, print data files or other data files. Addition- 
ally, server 40 preferably contains a print queue within 
the fixed disk for storing and managing print data proc- 
essed through server 40. Server 40 can be utilized by 
other devices on network 1 00 as a file server and may 
also act as a gateway for other devices on network 1 00 
to another network such as the Internet. 
[0026] Printer 50 may be any type of printing device 
from which images may be printed. For example, printer 
50 may be a laser or bubble-jet printer which is capable 
of operating as both a printer and a facsimile device. 
Printer 50 may have a storage device 51 that is prefer- 
ably a large fixed disk. Storage device 51 may be utilized 
for storing print data received by printer 50. However, 
as will become apparent from the discussion below, a 
print queue and print data storage device is preferably 
provided in server 40. Printer 50 also has an embedded 
smart-chip 57 which performs various functions related 
to encryption/decryption (if necessary) and authentica- 
tion of a recipient. In addition, printer 50 is connected to 
smart card interface device 55 which is capable of inter- 
facing with a smart card of a print job recipient, such as 
smart card 56. In this manner, the printing of a print job 
that requires authentication of the recipient may be con- 
trolled through the use of smart card interface device 55 
and smart card 56, in combination with smart-chip 57 in 
printer 50. 

[0027] Figure 2 is a block diagram showing an over- 
view of the internal architecture of desktop computer 1 0. 
In Figure 2, desktop computer 1 0 is seen to include cen- 
tral processing unit (CPU) 210 such as a programmable 
microprocessor which is interfaced to computer bus 
200. Also coupled to computer bus 200 are keyboard 
interface 220 for interfacing to a keyboard, mouse inter- 
face 230 for interfacing to a pointing device, floppy disk 
interface 240 for interfacing to a floppy disk, display in- 
terface 250 for interfacing to a display, network interface 
260 for interfacing to network 100, and smart card inter- 
face 265 for interfacing to smart card interface device 
15. 

[0028] Random access memory (RAM) 270 interfac- 
es to computerbus 200 to provide CPU 21 0 with access 
to memory storage, thereby acting as the main run-time 
memory for CPU 210. In particular, when executing 
stored program instruction sequences, CPU 21 0 loads 
those instruction sequences from fixed disk 280 (or oth- 
er memory media) into RAM 270 and executes those 
stored program instruction sequences out of RAM 270. 



It should, also be noted that standard-disk swapping 
techniques available under windowing operating sys- 
tems allow segments of memory to be swapped to and 
from RAM 270 and fixed disk 280. Read-only memory 
s (ROM) 290 stores invariant instruction sequences, such 
as start-up instruction sequences for CPU 21 0 or basic 
input/output operation system (BIOS) sequences f orthe 
operation of peripheral devices attached to computer 
10. 

io [0029] Fixed disk 280 is one example of a computer- 
readable medium that stores program instruction se- 
quences executable by CPU 21 0 so as to constitute op- 
erating system 281 , printer driver 282, smart card inter- 
face driver 283, other drivers 284, word processing pro- 
's gram 285, other programs 286, e-mail program 287 and 
other files 288. As mentioned above, operating system 
281 is preferably a windowing operating system, al- 
though other types of operating systems may be used 
with the present invention. Printer driver 282 is utilized 
20 to prepare image data for printing on at least one image 
forming device, such as printer 50. Smart card interface 
driver 283 is utilized to drive and control smart card in- 
terface 265 for interfacing with smart card interface de- 
vice 1 5 so as to read and write to a smart card such as 
25 smart card 1 6. Other drivers 284 include drivers for each 
of the remaining interfaces which are coupled-to com- 
puter bus 200. 

[0030] Word processing program 285 is a typical word 
processor program for creating documents and images, 
so such as Microsoft Word, or Corel WordPerfect docu- 
ments. Other programs 286 contains other programs 
necessary to operate desktop computer 10 and to run 
desired applications. E-mail program 287 is a typical e- 
mail program that allows desktop computer 1 0 to re- 
35 ceive and send e-mails over network 1 00. Other files 
288 include any of the files necessary for the operation 
of desktop computer 10 or files created and/or main- 
tained by other application programs on desktop com- 
puter 1 0. For example, Internet browser application pro- 
40 grams, such as M icrosoft I ntemet Explorer or Netscape 
Navigator, may be included in other files 288. 
[0031] Figure 3 is a block diagram showing an over- 
view of the internal architecture of printer 50. In Figure 
3, printer 50 is seen to contain a printer smart-chip 57 
45 which may be utilized in conjunction with smart-chip 
driver 358 for performing an authentication process of 
a recipient. Printer50 also contains a central processing 
unit (CPU) 310 such as a programmable microproces- 
sor which is interfaced to printer bus 300. Also coupled 
so to printer bus 300 are control logic 320, which is utilized 
to control printer engine 325 of printer 50, I/O ports 330 
which is used to communicate with various input/output 
devices of printer 50 (not shown), smart card interface 
365 which is utilized to interface with smart card inter- 
ns face device 55, network interface 360 which is utilized 
to interface printer 50 to network 1 00, and control device 
interface 356 which is utilized to interface with a device 
for obtaining control of the printer operations. 
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[0032] Control device interface 356 may interface with 
virtually any type of mechanism that a user may activate 
to obtain control of the printer. For instance, control de- 
vice interface 356 may interface with a button on a con- 
trol panel of printer 50, whereby the user pushes the but- 
ton to gain control over the printer. When the button is 
pressed, an indication of such is provided to print engine 
control logic 351, whereby the user gains control over 
the print engine operations. Of course, other devices 
could be used to gain control over the printer including 
a user entering a username (identification) at a control 
panel of printer 50, or by an authentication device be- 
ginning or completing an authentication process. As will 
be described in more detail below, the authentication 
process maybe any of a number of processes, including 
but not limited to entering a username and password, 
insertion of a smart card or hardware token into a reader, 
a wireless token (such as a speedway pass), or turning 
of a key. 

[0033] Control device interface 356 also interfaces 
with mechanisms for relinquishing control of the printer. 
For example, a control panel of printer 50 may include 
one button for obtaining control, and a different button 
for relinquishing control of the printer. In a similar man- 
ner as described above, when a device for relinquishing 
control of the printer is activated, regardless of the type 
of device, control device interface 356 supplies an indi- 
cation that the relinquishing device has been activated 
to print engine control logic 351 , whereby the user relin- 
quishes control over the print engine operations and 
normal printing operations resume. 
[0034] Also coupled to printer bus 300 are EEPROM 
340, for containing non-volatile program instructions, 
random access memory (RAM) 370, printer memory 51 
and read-only memory (ROM) 390. RAM 370 interfaces 
to printer bus 300 to provide CPU 310 with access to 
memory storage, thereby acting as the main run-time 
memory for CPU 310. In particular, when executing 
stored program instruction sequences, CPU 310 loads 
those instruction sequences from printer memory 51 (or 
other memory media) into RAM 370 and executes those 
stored program instruction sequences out of RAM 370. 
ROM 390 stores invariant instruction sequences, such 
as start-up instruction sequences for CPU 310 or BIOS 
sequences forthe operation of various peripheral devic- 
es of printer 50 (not shown). 
[0035] Printer memory 51 is one example of a com- 
puter-readable medium that stores program instruction 
sequences executable by CPU 310 so as to constitute 
printer engine logic 351 , control logic driver 352, I/O port 
drivers 353, smart card interface driver 354, other files 
357, printer smart-chip driver 358, and e-maii program 
359. Printer engine logic 351 and control logic driver352 
are utilized to control and drive the printer engine 325 
of printer 50 so as to print an image according to image 
data received by printer 50, preferably over network 
100. I/O port drivers 353 are utilized to drive the input 
and output devices (not shown) connected through I/O 



ports 330. Smart card interface driver 354 is utilized to 
drive smart card interface 365 for interfacing to smart 
card interface device 55, thereby enabling printer 50 to 
communicate with a smart card such as smart card 56 

s during the process of authenticating a recipient. 

[0036] Other files 357 contain other files and/or pro- 
grams for the operation of printer 50. Printer smart-chip 
driver 358 is utilized to interface with printer smart-chip 
57 for certain cryptographic operations. E-mail program 

io 359 is a typical e-mail program for enabling printer 50 
to receive e-mail messages from network 100. Such e- 
mail messages may contain print job-related informa- 
tion, as discussed in more detail below. Printer memory 
51 also includes FTP/HTTP client 395 which provide the 

15 ability to retrieve files over the network through network 
interface 360. Also connected to printer bus 300 are dis- 
play interface 375 and keypad interface 385. As will be 
described below, printer 50 may include a display and 
keypad that provides a recipient with an option to re- 

20 trieve a print job from a remote storage location utilizing, 
for example, FTP/HTTP client 395. 
[0037] Figure 4 is a block diagram showing an over- 
view of the internal architecture of server 40. In Figure 
4, server 40 is seen to include a central processing unit 

25 (CPU) 410 such as a programmable microprocessor 
which is interfaced to computer bus 400. Also-coupled 
to computer bus 400 is a network interface 460 for in- 
terfacing to network 100. In addition, random access 
memory (RAM) 470, fixed disk 41 , and read-only (ROM) 

30 490 are also coupled to computer bus 400. RAM 470 
interfaces to computer bus 400 to provide CPU 41 0 with 
access to memory storage, thereby acting as the main 
run-time memory for CPU 410. In particular, when exe- 
cuting stored program instruction sequences, CPU 41 0 

35 loads those instruction sequences from fixed disk 41 (or 
other memory media) into RAM 470 and executes those 
stored program instruction sequences out of RAM 470. 
It should also be recognized that standard disk-swap- 
ping techniques allow segments of memory to be 

40 swapped to and from RAM 470 and fixed disk 41 . ROM 
490 stores invariant instruction sequences, such as 
start-up instruction sequences for CPU 41 0 or basic in- 
puVoutput operating system (BIOS) sequences for the 
operation of peripheral devices which may be attached 

45 to server 40 (not shown). 

[0038] Fixed disk 41 is one example of a computer- 
readable medium that stores program instruction se- 
quences executable by CPU 41 0 so as to constitute op- 
erating system 411, network interface driver 412, en- 

50 cryption/decryption logic 413, e-mail program 414, 
queue 415, FTP/HTTP client 495, FTP/HTTP server 
496 and other files 41 6. As mentioned above, operating 
system 411 can be an operating system such as DOS, 
Windows 95, Windows 98, Windows NT, UNIX, Novell 

55 Netware or other such operating system. Network inter- 
face driver 41 2 is utilized to drive network interface 460 
for interfacing server 40 to network 1 00. E-mail program 
414 is a typical e-mail program and enables server 40 
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to receive and/or send e-mail messages over network 
100. Queue 415 is utilized to store numerous print jobs 
for output on one or more image forming devices, such 
as printer 50. Other files 41 6 contains other files or pro- 
grams necessary to operate server 40 and/or to provide 
additional functionality to server 40. FTP/HTTP client 
495 provides server 40 with the ability to retrieve data 
files via FTP and HTTP protocols over the network 
through network interface 460. Additionally, FTP/HTTP 
server 496 of server 40 can be accessed by FTP/HTTP 
client 395 of printer50 or an FTP/HTTP client in a work- 
station such as computer 1 0. 

[0039] Obtaining temporary exclusive control of a 
printing device will now be described in more detail. 
However, a brief description of what is meant by obtain- 
ing temporary exclusive control, how exclusive control 
can be obtained, relinquishing exclusive control, what a 
user can do while he has exclusive control, and some 
of the terms used in the following discussion will be pre- 
sented first. Obtaining exclusive control generally refers 
to blocking access to the printing device and gaining 
control of the print engine operations of the printing de- 
vice. Blocking access means control over network ac- 
cess to the printing device, control over all other com- 
munication interfaces of the printing device and printing 
of printer status pages or other administrative opera- 
tions. For instance, control over network access may be 
control over access to print jobs, or, if the printing device 
is a multi-function device, control over incoming jobs 
such as incoming facsimiles. Control over the commu- 
nication interfaces may be control over communication 
channels such as parallel and serial ports, USB (Univer- 
sal Serial Bus) ports, infrared devices, RF devices, etc. 
[0040] Additionally, control may be obtained either in 
conjunction with an authentication process or without re- 
gard to an authentication process. In a case where con- 
trol is obtained in conjunction with an authentication 
process, control may be obtained either at the beginning 
of the authentication process or after the authentication 
process has completed. In the former case where con- 
trol is obtained at the beginning of the authentication 
process, control is relinquished if the authentication 
process fails. On the other hand, in the latter case, con- 
trol is not obtained until a successful authentication 
process has been completed. 
[0041 ] There are numerous authentication processes 
that could be performed, some of which are described 
in more detail below. Briefly, the authentication process- 
es may include entering a usemame and password, in- 
sertion of a smart card or hardware token into a reader, 
reading of a wireless token (such as a speedway pass), 
turning of a key, or biometrics. Of course, the invention 
is not limited to any particular authentication process 
and the invention may be employed with any type of au- 
thentication process, including those listed above. 
[0042] Control may also be obtained without an au- 
thentication process. For example, a user may enter a 
usemame on a keypad at the printer, thereby gaining 



control. This process does not necessarily perform an 
authentication process, but rather merely identifies the 
user and provides him with control over the printer upon 
entering his usemame. Additionally, the printer may be 

s providedwith a buttonforgaining control. Inthismanner, 
a user who wants to gain control over the printer merely 
presses the button and is provided control over the print- 
er. As can readily be seen , this type of device for gaining 
control has no correlation to the user and therefore any 

10 user could obtain control in this manner. The invention 
is not limited to these methods of gaining control and 
virtually any device that provides the ability to gain con- 
trol over the printer could be used. 
[0043] After the user gains control of the printer, the 

15 printer generally only returns to normal printing opera- 
tions when the user relinquishes control. Similar to the 
process of gaining control, there are numerous ways in 
which a user could relinquish control and the invention 
is not limitedto any one particular way. Some examples 

20 of ways to relinquish control may be pressing a button 
on a control panel of the printer, a user activity timeout, 
completion of pending print operations and a user activ- 
ity timeout, removal of a smart card or hardware token 
from the reader, or removal of a smart card or hardware 

25 token from the reader in conjunction with completion of 
pending print operations, a user activity timeotit and a 
token timeout. Additionally, an authentication/authoriza- 
tion failure could be utilized to relinquish control. 
[0044] While the user has exclusive control over the 

so printer operations, there are various operations that can 
be performed. For instance, if the printer is a multi-func- 
tion device such as a printer/facsimile or a printer/copier, 
the user can perform facsimile operations to send a fac- 
simile or to print out a facsimile message stored in an 

35 electronic mailbox, or they may perform copying opera- 
tions to produce photocopies. Additionally, the user may 
browse a network for files to print in the printer. For in- 
stance, the user could browse a network for files stored 
in a file server or an e-mail server. Additionally, the user 

40 could utilize a URL (Universal Resource Locator) to re- 
trieve a file from the Internet or an intranet location and 
have it printed on the printer. Further, the user could ac- 
cess a listing of print jobs contained in a print queue of 
the printer. The listing could be provided to display all 

45 print jobs, only print jobs belonging to the user, or only 
authenticated print jobs belonging to the user (if the user 
is authenticated). Therefore, the user could select a print 
jobfrom the queueto print. As can readily beseen, there 
are numerous operations that can be performed by the 

so user once he has exclusive control over the printer. The 
foregoing are merely some examples of operations that 
could be performed and the invention is not limited to 
these, but may include other operations as well. 
[0045] Regarding some of the terms used in the fol- 

55 lowing discussion, the term "sender" refers to the person 
who submits a print job from a host computer, or sending 
node, to be printed out by an image forming device. The 
"intended recipient" refers to the person holding the 
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proper credentials with which he can authenticate him- 
self at the image forming device. In some cases, the 
sender and the intended recipient may be one in the 
same. That is, the person who sends the print job may 
also hold the proper credentials to authenticate himself 
at the image forming device. In other cases, the sender 
and the intended recipient may be different individuals. 
For example, the sender may submit a print job that is 
to be retrieved by someone other than himself who holds 
the proper credentials to be authenticated at the image 
forming device. However, in the examples described be- 
low, the "intended recipient" refers to the person holding 
the proper credentials with which he can authenticate 
himself at the image forming device, regardless of who 
submitted the print job. 

[0046] The term "sending node" refers to an entity that 
submits print jobs to a printer. This may include, but is 
not limited to, a personal computer or an intermediate 
server other than a print server. A print job may be sub- 
mitted directly from a sending node to a print server or 
to a printer itself. 

[0047] A "print queue" refers to a software and hard- 
ware mechanism for storing print jobs. The mechanism 
may include, but is not limited to, buffers in RAM, RAM 
disks, hard disks, and flash disks. The print queue may 
be located in any one of several locations, including a 
personal computer that submits the print jobs (sending 
node), a network printer itself, a stand alone print server, 
or a personal computer acting as a print server. The print 
queue is a temporary storage location for print jobs be- 
fore they are submitted to the printer for printing. 
[0048] A "print server" refers to a software mechanism 
to receive print jobs and send them to a printer for print- 
ing. The print server may be a stand alone print server 
such as a Novell Pserver, may be contained within a net- 
work printer itself, or may be contained within another 
personal computer. In a case where the print server is 
contained within another personal computer, the print 
server in the personal computer may accept print jobs 
from another sending personal computer and then sub- 
mit them to a print server located within a networked 
printer. 

[0049] A "printing device" refers to an entity that proc- 
esses the print jobs and prints out an image onto a re- 
cording medium. Examples of printing devices include 
bubble-jet printers, laser printers, facsimile machines, 
and network copier/printer machines. It should be noted 
that the present invention may be utilized in any image 
forming device, including but not limited to the foregoing 
image forming devices. 

[0050] "Accounting software" refers to a computer 
program that performs accounting tasks for network 
printing. Such a program may be provided in a central- 
ized accounting server that retrieves usage information 
from all printers in the network. The program could also 
reside on a print server, within a personal computer act- 
ing as a print server, or virtually any other device that is 
capable of collecting print job usage information from 



print jobs printed out by printers in the network. 
[0051] In the following discussion, the term "normal 
print job" means a print job that does not contain any 
special electronic header information or other informa- 

s tion identifying any particular recipient with the print job 
and that does not require authentication of the recipient 
in order to be printed. Normal print jobs are generally 
processed by the print server to be printed out in turn, 
i.e. after other print jobs already received by the printer. 

io They do not require recipient authentication in order to 
be printed and therefore are not held off from being print- 
ed until a recipient presents the proper authentication 
information. 

[0052] The term "authenticated print job" means a 

15 print job that can only be printed out after the intended 
recipient has been authenticated. That is, an authenti- 
cated print job contains unique identification information 
of the intended recipient and is held off from being print- 
ed until the recipient has been authenticated at the print- 

20 er. Once the recipient has been authenticated, the au- 
thenticated print job is released for printing. 
[0053] Figure 5 depicts one system arrangement in 
which an embodiment of the present invention may be 
employed. The embodiment of the invention is not lim- 

25 ited to being employed in the system of Figure 5 and as 
will be described below, may be employed in numerous 
other systems. As shown in Figure 5, one or more send- 
ing nodes 51 0 such as computer 1 0, a print server 540 
such as server 40, and at least one printing device 550 

30 such as printer 50, communicate via a network 500. In 
this regard, network 500 may be any type of network, 
including a local area network (LAN), a wide area net- 
work (WAN), the Internet, an intranet or any other type 
of network. A hard-wired network connection is not nec- 

35 essarily required and the present invention may be em- 
ployed where the computer and printer communicate via 
a wireless connection. Also attached to printer 550 is 
smart card interface device 555. 
[0054] In the present system shown in Figures, a print 
queue is external to printer 550 and is preferably includ- 
ed within server 540. A case where the print queue is 
included within the printer itself rather than being exter- 
nal to the printer will be described in more detail below 
with regard to Figure 14. 

45 [0055] As stated above, exclusive control can be ob- 
tained either in conjunction with authentication or with- 
out regard to authentication. In the following discussion, 
exclusive control in conjunction with authentication will 
be discussed first and then a discussion of exclusive 

so control without regard to authentication will be provided. 
[0056] Figures 6A, BB, 6C and 6D are flowcharts de- 
picting process steps for obtaining control of a printing 
device in conjunction with authentication where control 
is obtained after a successful authentication process. 

55 Briefly, the process steps comprise print data being sub- 
mitted from a sending node to a print queue, determining 
whether the print job is an authenticated print job and if 
so, deferring printing until the intended recipient is au- 
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thenticated, authenticating the intended recipient, defer- 
ring printing of print jobs in the print queue, the authen- 
ticated recipient selecting print jobs to be printed out, 
the authenticated recipient relinquishing control and the 
printing device resuming normal printing operations. 
[0057] As shown in Figure 6A, in step S600, in order 
to submit a print job, a user activates a print driver at a 
sending node such as desktop computer 10 or laptop 
computer 20. For example, if the sender is utilizing a 
word processor application program, such as Microsoft 
Word or Corel WordPerfect, and wants to print the doc- 
ument, he would normally select a print option within the 
application program, thereby activating a print driver. 
The print driver usually permits the sender to select 
printing options, such as printing speed, print resolution, 
or number of copies. For the present invention, one op- 
tion would be to select an authenticated printing mode. 
In this regard, if the sender wants the print job to only 
be printed out after the recipient has been authenticated 
at the printer, the sender would select this mode. Of 
course the invention is not limited to selection of an au- 
thenticated print mode in a print driver and other proc- 
esses for submitting authenticated print jobs may be uti- 
lized instead. For instance, if the print driver has the abil- 
ity to automatically detect that a smart card is inserted 
in the smart card reader, the print driver may automati- 
cally obtain the recipient's identification information from 
the smart card and submit the print job as an authenti- 
cated print job, without the need for a user to select an 
authenticated print mode in the print driver. As such, any 
method for submitting an authenticated print job could 
be utilized. 

[0058] In Figure 6A, if the print job is an authenticated 
print job, print data is submitted along with user identi- 
fication information (step S601). The user identification 
information may be a distinguished name contained in 
a digital certificate, a user/personal identification 
number, biometric information, or any other information 
that uniquely identifies the intended recipient. The iden- 
tification information links the print job to the intended 
recipient so that only the intended recipient is able to 
print the print job. More specifically, identification infor- 
mation (such as the intended recipient's first name, last 
name, country, locality (city), organization, organization 
unit, or other information that is unique to him) is linked 
to the print job. The actual identification information 
linked to the print job is implementation dependent. It 
could simply be a user ID number or perhaps an entire 
digital certificate. Of course, the sender would not have 
biometric information of the recipient since such infor- 
mation requires the recipient to be present at the send- 
ing node and to supply such information himself. How- 
ever, after the sender submits the print job utilizing the 
recipient's distinguished name or digital certificate, the 
recipient may be authenticated at the image forming de- 
vice by a biometric device. Therefore, there may be a 
distinction between the types of devices utilized in link- 
ing the recipient's information to the print job for submit- 



ting the authenticated print job and the types of devices 
utilized in authenticating the recipient. 
[0059] The recipient's information may be obtained 
and linked to the print job by various methods. For ex- 

s ample, the sender could insert a smart card into a smart 
card reader located at the sending node, such as smart 
card reader 15 connected to computer 10 as seen in 
Figure 1 . The smart card contains the intended recipi- 
ents unique identification information in digital form 

10 which is supplied to the computer through smart card 
interface 265. Alternatively, the information may be ob- 
tained from a digital certificate via a Public Key Infra- 
structure, by e-mail or some other device. In this case, 
the information could be downloaded to computer 1 0 

is over the Internet to be subsequently submitted with the 
print job. 

[0060] Further, biometric identifying information such 
as fingerprints or retinal scans of the recipient could be 
utilized such that a biometric device at the printer could 
20 be used to authenticate the recipient. Therefore, any de- 
vice that provides unique identification information 
about the recipientto the sending node and subsequent- 
ly performs authentication of the recipient could be 
used. 

25 [0061 ] Of course, authenticated print jobs are not the 
only type of print jobs that can be submitted by the send- 
ing node and the invention is not limited to use with au- 
thenticated print jobs. The sender could select a normal 
print job mode from the printer driver wherein a normal 

30 print job not requiring authentication of the recipient 
would be submitted. Thus, in the present example, step 
S601 would be omitted. 

[0062] Referring again to Figure 6A, once the identi- 
fication information has been provided in step S601 ,the 

35 authenticated print job is submitted for printing from the 
sending node (step S602). In Figure 5, the authenticated 
print job is submitted to a print queue contained within 
server 540. However, as previously stated, the print job 
is not required to be submitted to a print queue in a serv- 

40 er and may be submitted to a print queue within the 
sending node itself, across a network to an intermediate 
server orto a print server contained within a printer itself. 
[0063] Figure 6B depicts process steps of a print 
queue insertion thread. In Figure 6B, after the authenti- 

45 cated print job has been submitted by the sending node, 
the print queue insertion thread unblocks from waiting 
for a print job (step S603) in order to receive and store 
the print job (step S604). A determination is then made 
whether the received print job is an authenticated print 

so job (step S605). If the print job is not an authenticated 
print job, control returns to step S603 and this thread 
waits to receive another print job. Note that a separate 
print queue extraction thread is responsible for remov- 
ing print jobs from the queue and sending them to the 

55 printer to be printed (depicted in Figure 6E). 

[0064] In most cases, upon receiving the print data 
from the print queue, the printer buffers the data in mem- 
ory and begins processing the data to print out an image. 
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However, in some printers, once the print data is sub- 
mitted from the queue to the printer, the printer may tem- 
porarily store the data in a local disk within the printer 
rather than buffering the print data in memory. In these 
printers, once sufficient data has been stored on the 
disk, the printer may begin buffering the data from the 
local disk into the printer's memory and then begin print- 
ing while the remainder of the data continues to be 
stored to the disk. Of course, the printer may also wait 
f orthe entire print job to be stored in the local disk before 
data begins buffering rather than beginning to buffer da- 
ta once sufficient data has been stored on the disk. 
[0065] Returning to step S605, if the print job is an 
authenticated print job, then a determination is made 
whether or not the recipient has been authenticated 
(step S606). This determination may comprise the print 
queue performing a polling operation to poll the printer 
for the recipient's identification information. If the recip- 
ient has been authenticated, then the printer would re- 
spond to the queue with the recipient's identification in- 
formation. If the recipient has not been authenticated, 
the printer may either provide a negative response or 
no response at all. If the recipient is not yet authenticat- 
ed, then flow proceeds to step S607 where the print 
queue registers with the printer to receive a notification 
when the recipient is authenticated. Thus, the print job 
is deferred from printing until the recipient holding the 
proper authentication information presents the authen- 
tication information at the printer. The print data may be 
stored in the print queue or in a print server. 
[0066] There are various methods in which an authen- 
ticated print job may be deferred from being printed until 
the recipient is authenticated. One method is forthe print 
queue to attempt to establish communication with the 
printer in order to submit the print data to it for printing. 
Upon attempting to establish communication, the print 
queue may request the recipient's authentication infor- 
mation. If the printer has not received authentication in- 
formation from the recipient, i.e. the recipient has not 
yet been , authenticated at the printer, then the print 
queue may register with the printer for the printer to no- 
tify it when the recipient has been authenticated. In the 
present example, since the recipient has not yet been 
authenticated, the printer fails to return the necessary 
authentication information and the print queue registers 
with the printer and waits to send the print job data to 
the printer after receiving notification (step S607). 
[0067] Another method of deferring printing of an au- 
thenticated print job may be accomplished by using a 
polling mechanism. Several network protocols utilize a 
request/response routine. In this regard, once the queue 
receives an authenticated print job, the protocol re- 
quests the recipient's authentication information from 
the printer. If the recipient has not arrived at the printer 
and has not presented the authentication information to 
the printer, then the printer returns a negative response 
or no response at all and the print job is deferred from 
being printed. Repeated requests are preformed over 



set time intervals by the protocol, each receiving a neg- 
ative response or no response until the recipient 
presents the authentication information to the printer. 
Once the recipient has been authenticated, the protocol 

5 receives the required information and then submits the 
print data to the printer for printing. 
[0068] Embodiments of the invention will now be de- 
scribed in more detail by way of several examples. A 
first example will discuss a printer receiving both normal 

10 and authenticated print jobs where the recipient has not 
yet been authenticated. A second example will discuss 
a case where only authenticated print jobs are in the 
queue, a recipient is authenticated and opts to print all 
of his authenticated print jobs and promptly relinquishes 

is control. A third example will discuss a case where both 
normal and authenticated print jobs are in the queue, a 
recipient is authenticated and opts to select all of his 
authenticated print jobs and promptly relinquishes con- 
trol. A fourth example will discuss a case where both 

20 normal and authenticated print jobs are in the queue, a 
recipient is authenticated and maintains control. The 
fourth example also includes a discussion of additional 
print jobs being received by the queue while the recipi- 
ent maintains control. A fifth example will discuss an au- 

25 thenticated recipient selecting which print jobs to print, 
including-print by reference print jobs, and selecting a 
print job from a network, such as via the Internet or an 
intranet. 

[0069] In a first example, a print queue that contains 
30 both normal and authenticated print jobs will be de- 
scribed with reference to Figures 7 and 8. In this exam- 
ple, it is assumed that no authentication has been pro- 
vided by any recipient to the printer. As shown in Figure 
7, the print queue, such as queue 415 in server 40, con- 
35 tains six print jobs 601 to 606. Print jobs 601 , 602, 604 
and 605 are normal print jobs and print jobs 603 and 
606 are authenticated print jobs. Each print job in the 
queue was received by the queue in ascending order. 
[0070] The print queue extraction thread of Figure 6E 
40 begins processing of each of the print jobs in the order 
in which they were received. Therefore, since print job 

601 was received first, the print queue processes it first. 
As shown in Figure 7, print job 601 is a normal print job. 
Since no other print jobs are being printed by the printer 

45 and the print job does not require recipient authentica- 
tion, the print queue establishes communication with the 
printer and submits the print data to the printer where it 
is buffered and printed out (steps S652 and S653 as 
shown in Figure 6E). While the printer is busy process- 
so ing print job 601, print jobs 602 through 606 continue to 
be stored in the queue until their turn to be processed 
arrives (the result of a NO determination in step S652). 
[0071] Once all of the print data for print job 601 has 
been buffered, the print job is removed from the queue 
55 (step S654) and the print queue begins processing the 
next print job in the queue, print job 602. Since print job 

602 is also a normal print job and does not require re- 
cipient authentication to be printed, the print data is sub- 
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mitted by the queue to the printer where it begins buff- 
ering in the printer while print job 601 completes printing. 
Once print job 601 completes printing and sufficient print 
data for print job 602 has been buffered, the printer be- 
gins to print print job 602 (step S653). 
[0072] Once all of the print data for print job 602 has 
been buffered, the print job is removed from the queue 
(step S654) and the print queue attempts to submit the 
next print job to the printer. In the present example, print 
jobs 603 through 606 are pending in the queue and 
therefore the print queue attempts to submit print job 
603. However, since print job 603 is an authenticated 
print job, the print queue extraction thread gets the next 
print job in the queue (step S650). 
[0073] Therefore, since print job 604 is a normal print 
job, like print jobs 601 and 602, print job 604 is proc- 
essed and printed out (steps S652 and S653). Likewise, 
normal print job 605 is processed and printed after print 
job 604. Then, following processing of print job 605, the 
print queue attempts to submit authenticated print job 
606. However, like print job 603, print job 606 is not print- 
ed and remains in the print queue after print job 603 
(step S651). Therefore, after print jobs 601, 602, 604 
and 605 have been printed, the print queue appears as 
shown in Figure 8. 

[0074] A second example will now be discussed with 
regard to Figures 6C, 6D and 8, wherein an authenticat- 
ed recipient retrieves authenticated print jobs 603 and 
606 remaining in the queue as shown in Figure 8. In this 
example it is assumed that once the recipient selects an 
option to print all of his authenticated print jobs, he 
promptly relinquishes control of the printer. 
[0075] As stated above, there are several ways in 
which an authenticated recipient can relinquish control 
over the printer after he has been authenticated. One 
way would be for the recipient to merely push a release 
button on the printer after he has been notified that he 
has been successfully authenticated and has selected 
a printing option (such as print all authenticated print 
jobs or select a print job to print). Upon pushing the but- 
ton, the printer would notify the print queue that the re- 
cipient has relinquished control and that it is now avail- 
able for accepting print jobs, depending upon the print- 
er's buffer space availability of course. However, even 
where the recipient has been authenticated and presses 
a button to release control over the printer, if the user 
opts to print all of his authenticated print jobs pending 
in the queue, the authenticated print jobs continue to be 
processed and are printed out ahead of other print jobs. 
This provides the recipient the ability to gain control over 
the printer just long enough to have his authenticated 
print jobs printed out ahead of other print jobs without 
the recipient having to wait at the printer until all of his 
print jobs have been printed before he relinquishes con- 
trol. Therefore, the recipient can be authenticated and 
promptly relinquish control so that his print jobs will be 
printed, but he does not have to wait at the printer and 
can leave the printer and return at a latertime to retrieve 



his hard copy printouts if he wants to. 
[0076] Othermethods for relinquishing control may in- 
clude the recipient entering a code on a keypad or re- 
moving his smart card from the smart card reader. With 

s the latter method, the recipient presents his smart card 
to the smart card reader, whereby he is authenticated 
and gains control over the printer. As long as the recip- 
ient's smart card remains in the smart card reader, he 
remains authenticated and maintains control over the 

10 printer. Once the recipient removes his smart card from 
the reader, he is no longer authenticated and relinquish- 
es control over the printer. As stated above, the inven- 
tion is not limited to any particular method of relinquish- 
ing control and the foregoing are merely examples of 

15 some of the methods that may be employed. 

[0077] Returning to the present example, it should be 
noted that the present example relates to a case where 
only authenticated print jobs are pending in the queue 
at the time the recipient is authenticated and that no ad- 

20 ditional print jobs are received by the queue after the 
recipient is authenticated. A case where print jobs other 
than authenticated print jobs are pending in the queue 
when the recipient is authenticated or where print jobs 
are received by the queue after the recipient has been 

25 authenticated will be discussed in more detail below. Ad- 
ditionally, in the present example, it is assumed- that the 
recipient is authenticated using a smart card. Of course, 
as stated above any method of authentication could be 
employed and the invention is not limited to use with 

30 smart cards. However, for the sake of brevity, only the 
use of smart cards will be discussed in detail. 
[0078] Referring to Figure 6C, in order to have print 
jobs 603 and 606 printed out, the recipient holding the 
proper authentication (identification) information 

35 presents this information to the printer in step S609. For 
the present example, the recipient presents smart card 
56 to smart card reader 55 attached to printer 50. Once 
the recipient presents his smart card to the smart card 
reader, the printer processes the information through 

40 smart card interface 365 and smart card interface driver 
354 to control Iogic320. The printer then performs aver- 
ification procedure to validate the integrity and authen- 
ticity of the unique identification information (step S610). 
If the integrity and authenticity check fails (step S611), 

45 the user is notified of such in step S61 6. If the integrity 
and authenticity check is successful (step S611 ), an au- 
thentication process is performed in an attempt to au- 
thenticate the recipient (step S61 2). This may comprise 
printer 50 performing a "challenge/response" mecha- 

so nism, or other process to validate the identity of the re- 
cipient (in this case, the smart card holder). 
[0079] in step S613, a determination is made whether 
the attempt to authenticate the recipient is successful. 
If the recipient is authenticated, flow proceeds to step 

55 S61 4. If the attempt to authenticate has failed, then the 
recipient is notified of the authentication failure (step 
S616). The notification may be provided via a visual dis- 
play having an error message, an alarm on the printer 
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or some other device to indicate that the authentication 
process has failed. 

[0080] After authentication, an optional check to de- 
termine whether the recipient is authorized to use the 
device may be performed (step S614). This authoriza- 
tion verification may be performed through a mecha- 
nism that includes but is not limited to directory queries 
and access control list lookups. If the recipient is not au- 
thorized to use the device, then he is provided with an 
authorization failure (step S616). If the recipient is au- 
thenticated and authorized, he may receive a notifica- 
tion to this effect. 

[0081] Once the recipient has been authenticated and 
optionally authorized (if an authorization check is pro- 
vided for), the recipient gains exclusive control of the 
device in the present example and all print jobs pending 
in the queue are deferred and prevented from being 
printed (step S617). Additionally, in step S617, if the 
print queue has registered to receive a notification from 
the printer, it is notified that the recipient has been au- 
thenticated. One way print jobs may be deferred is by 
the printer providing an indication to the queue that it is 
"busy" or that the printer's buffer is full. Recall that in 
order for print data to be submitted by the queue to the 
printer, the queue generally attempts to establish com- 
munication with the printer and determines whether the 
printer is available for accepting print data. Therefore, if 
the printer appears busy, then it is unavailable for ac- 
cepting print data, thereby preventing the print jobs in 
the queue from being sent to the printer. In the present 
example, after the recipient has been authenticated, the 
printer appears busy for all print jobs in the queue and 
continues to appear busy until the recipient relinquishes 
control of the printer. It should be noted that the present 
invention is not limited to a busy or buffer full indication 
and any other mechanism for preventing the print jobs 
from being buffered and printed may also be utilized. 
[0082] Upon receiving notification that the recipient 
has been authenticated (step S617), the queue deter- 
mines whether any authenticated print jobs are pending 
in the queue for the authenticated recipient (step S61 8). 
If no authenticated print jobs are pending in the queue 
for the authenticated recipient, the recipient is notified 
of such in step S619. If print jobs are pending in the 
queue for the authenticated recipient, then flow pro- 
ceeds to step S622 in Figure 6D. In the present exam- 
ple, print jobs 603 and 606 are pending in the queue. 
[0083] As seen in Figure 6D, in step S622 a determi- 
nation is made whether the recipient has opted to select 
a print job to print. In this regard the recipient may select 
one or more print jobs from a list of print jobs pending 
in the queue. Alternatively, the recipient may select a 
print job from a remote storage location. A more detailed 
discussion of recipient selection of a print job is provided 
below with regard to Figures 17A through 17D. If the 
recipient opts for user selection, then flow proceeds to 
steps S624 and S625 where the recipient selects a print 
job and the selected print job is released to be printed. 



If the recipient does not opt for user selection, but rather 
opts to print all of his authenticated print jobs pending 
in the queue, then flow proceeds to step S623 where 
the next authenticated print job pending in the queuefor 
s the authenticated recipient is released to be printed. In 
the present example, once the user opts to print all of 
his authenticated print jobs, he relinquishes control of 
the printer by removing his smart card from the reader. 
[0084] The next authenticated print job (print job 603 
10 in the present example) in the queue is processed 
through steps S626 to S630, with flow then returning to 
step S620 of Figure 6C. In the preferred embodiment, 
the recipient is required to maintain control over the 
printing device in order to print all of his authenticated 
15 print jobs. That is, each authenticated print job is proc- 
essed one at a time from step S61 8 to step S630 and 
back to step S620. As such, upon completion of 
processing print job 603, the printer begins a new proc- 
ess to process the next authenticated print job (print job 
20 606). In the process for print job 606, the print queue 
again requests the recipient's authentication informa- 
tion from the printer. If the recipient has relinquished 
control in step S620, the printer will provide a negative 
response or no response at all. Therefore, in the pre- 
25 ferred embodiment, once the recipient relinquishes con- 
trol (here.-by removing his smart card), any authenticat- 
ed print jobs pending in the queue for which the print 
queue has not yet requested the recipient's identifica- 
tion information will remain in the queue and will not be 
30 printed until the recipient is authenticated again. There- 
fore, once the recipient has relinquished control and 
print job 606 has not yet begun to be processed, print 
job 606 remains in the print queue. 
[0085] Alternatively, once the recipient has been au- 
35 thenticated and opts to print all of his authenticated print 
jobs pending in the queue, the print queue may utilize 
the recipient's identification information to release and 
process all authenticated print jobs intended for the re- 
cipient (print jobs 603 and 606) in the queue in step 
40 S623, before a determination is made in step S620 
whether the recipient has relinquished control. In this 
case, both print jobs 603 and 606 would be processed 
and the print queue would then be empty. 
[0086] Returning to Figure 6D, when a print job has 
45 been released for printing in either step S625 or step 
S623, a determination is made whether the print job is 
a print by reference print job (step S626). In the present 
invention, a print by reference print job is one in which 
the print data is not stored in the print queue, but rather 
so is stored in a remote storage location with the print job 
in the queue containing a reference to the remote stor- 
age location. If the print job is a print by reference, then 
the queue retrieves the print data from the remote stor- 
age location in step S627. if the print job is not a print 
55 by reference, then flow proceeds to step S628. 

[0087] In step S628 the printing process commences 
and in step S629, printing resources utilized during the 
printing operations are tracked. For example, resources 
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such as the number and type of paper or the amount 
and type of ink utilized during the printing operations 
may be tracked. The tracked resources are then corre- 
lated with the authenticated recipient's identification in- 
formation and submitted to an accounting device that s 
utilizes the tracking information (step S630). Such an 
accounting device may be a print server or other device 
that employs an accounting program. It should be noted 
that in some cases resource tracking may not be desired 
and therefore steps S629 and S630 may be omitted. 10 
[0088] After pri nting the authenticated print jobs , a de- 
termination is made whether the recipient has relin- 
quished control of the printer (step S620 in Figure 6C). 
In the present example, recall that the recipient has re- 
linquished control promptly after being authenticated 15 
and selecting an option to print all of his authenticated 
print jobs. That is, he promptly removes his smart card 
from the smart card reader, thereby relinquishing control 
over the printer's print capabilities. In the preferred em- 
bodiment, print job 603 is processed and after the recip- 20 
ient has relinquished control, the printer provides a neg- 
ative response for printing print job 606 and it remains 
in the queue with the printer returning to normal printing 
operation where it releases all deferred (non-authenti- 
cated) print jobs pending in the queue (step S621)(i.e. 25 
the printer no longer provides a busy indication). 
[0089] Of course, with regard to the alternate embod- 
iment, when the recipient relinquishes control of the 
printer before print job 606 is processed, the determina- 
tion in step S620 is not performed until after print job 30 
606 has been processed and therefore, the printer does 
not return to normal printing operations until all authen- 
ticated print jobs have completed printing. 
[0090] A third example will now be described with re- 
gard to Figures 6C, 6D and 9. In this example, print jobs 35 
1001 to 1005 are pending in the queue at the time the 
recipient is authenticated, at least one of which is an 
authenticated print job requiring authentication of the re- 
cipient to be printed. Like the second example, in the 
present example the recipient presents the proper au- to 
thentication information using a smart card device and 
promptly removes his smart card from the smart card 
reader. Also, in the present example the recipient does 
not opt for user selection of print jobs and none of the 
print jobs are print by reference. 45 
[0091] In respect of the present example, the print 
jobs pending in the print queue at the time just prior to 
step S609 are as shown in Figure 9. Therefore, just prior 
to the recipient presenting his smart card to the smart 
card reader, print jobs 1001 through 1005 are pending so 
in the queue, with print jobs 1004 and 1005 being the 
authenticated print jobs pending for the authenticated 
recipient. 

[0092] Referring again to Figure 6C, once the recipi- 
ent has been authenticated and authorized (if provided 55 
for), the print queue is notified that the recipient has 
been authenticated and all print jobs pending in the 
queue are deferred in step S617 as described above. 



Again, deferring the print jobs may be accomplished by 
the printer merely providing an indication to the queue 
that it is busy orthatthe buffer is full, thereby preventing 
the print jobs in the queue from being submitted to the 
printer. 

[0093] Once all of the print jobs pending in the queue 
have been deferred, the queue determines whether any 
authenticated print jobs are pending for the recipient 
(step S61 8). The determination may be made by match- 
ing the authenticated recipient's unique identification in- 
formation to the print jobs pending in the queue. If a 
match is found, then flow proceeds to step S622 of Fig- 
ure 6D. If no matching print jobs are found, then the re- 
cipient is notified of such in step S619. In the present 
example print jobs 1004 and 1005 are authenticated 
print jobs matching the authenticated recipient. Accord- 
ingly, flow proceeds to step S622 where the recipient 
opts for printing all of his authenticated print jobs. There- 
fore, flow proceeds to step S623 where print job 1 004 
is released to print and processed through steps S626 
to S630. 

[0094] Then, flow returns to step S620 of Figure 6C 
to determine whetherthe recipient has relinquished con- 
trol. Recall that in the present example, the recipient re- 
moves his smart card from the reader promptly after opt- 
ing to print all of his authenticated print jobs. According- 
ly, in step S620 it is determined that the recipient has 
relinquished control and print job 1005 is not released 
and printed. Therefore, once print job 1004 has printed, 
the remaining non-authenticated (normal) print jobs in 
the queue are then released and processed accordingly 
(step S621). 

[0095] A fourth example will now be described with 
regard to Figures 6C, 6D and 10 through 12. In this ex- 
ample, the print queue of Figure 10 is initially the same 
as that shown in Figure 9. However, unlike the previous 
examples, the recipient does not promptly relinquish 
control over the printer once he is authenticated, but 
rather maintains control over the printer. Also, in the 
present example, after the recipient has been authenti- 
cated, additional print jobs are received by the queue, 
the recipient does not opt for user selection, and none 
of the print jobs are print by reference. 
[0096] In the present example, steps S609 through 
S623 are the same as described above. To summarize 
these steps, once the recipient is authenticated, all print 
jobs in the print queue are deferred and authenticated 
print job 1 004 is processed and released to print. Flow 
then returns to step S620 where it is determined that the 
recipient has not relinquished control and therefore flow 
returns to step S623 to process and release print job 
1005. However, unlike the third example, the print jobs 
remaining in the queue after ail authenticated print jobs 
have been printed (here, print jobs 1001, 1002 and 
1 003) are not released, but rather remain deferred in the 
print queue. This is because the recipient has not relin- 
quished control of the printer in step S620. Recall that 
one way for a recipient to maintain control overthe print- 
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er is to merely leave his smart card in the reader, thus 
continuing to defer printing of all print jobs remaining in 
the queue that are not authenticated print jobs for the 
recipient. 

[0097] Accordingly, as shown in Figure 6C, in step 5 
S620 a determination is made whether or not the recip- 
ient has relinquished control. Since the recipient has not 
relinquished control, the print jobs remain deferred with 
flow returning to step S61 8 to determine if any additional 
authenticated print jobs are pending in the queue. That 10 
is, a determination is made whether any new authenti- 
cated print jobs have been received by the queue. 
[0098] Assuming that the recipient has not yet relin- 
quished control, i.e. has not removed his smart card 
from the smart card reader, the present example will 15 
now be expanded to include receipt of additional print 
jobs while the recipient maintains control over the print- 
er. As shown in Figure 11, print jobs 1001, 1002 and 
1003 remain deferred in the queue. Additionally, normal 
print job 1 006 and authenticated print job 1 007 are re- so 
ceived by the queue while the recipient maintains con- 
trol over the printer. When additional print jobs are re- 
ceived, the processing of these print jobs begins at step 
S603 of Figure 6B. Once the print job is added to the 
queue (step S604), flow returns to step S603, unless the 25 
print job is an authenticated print job. When the print 
queue insertion thread determines that the print job re- 
ceived is an authenticated print job (step S605) and that 
the intended recipient is authenticated at the time the 
job arrives (step S606), it then waits for another print job 30 
(step S603). Therefore, print job 1 006 in this example is 
deferred. However, since the recipient has already been 
authenticated, the operations as defined in steps S61 8 
to S621 of Figure 6C determine that an authenticated 
print job intended forthe authenticated recipient is avail- 35 
able and thus print job 1 007 is processed and released 
to be printed similar to print jobs 1004 and 1005. As a 
result, any authenticated print jobs intended for the re- 
cipient that are received by the queue during a period 
in which the recipient maintains control overthe printer's 40 
print capabilities are printed out, while normal print jobs 
are deferred from being printed. Again, once the recip- 
ient relinquishes control, the printer returns to normal 
printing operation and print jobs 1001, 1002, 1003 and 
1 006 are released and printed. 45 
[0099] In a fifth example, Figure 12 shows a queue 
after print jobs 1004, 1005 and 1007 have been printed 
with print jobs 1001, 1002, 1003, and 1006 remaining 
deferred and authenticated print job 1008 is received by 
the queue. Authenticated print job 1008 requires au- so 
thentication of a different authenticated recipient. That 
is, the recipient who has been authenticated at the print- 
er is not the intended recipient for the authenticated print 
job 1 008. Again, steps S603 to S605 of Figure 6B are 
the same as described above. However, in step S606 a 55 
determination is made whether the intended recipient is 
authenticated. Since print job 1 008 is an authenticated 
print job, but is for a different authenticated recipient, it 



is not released and printed. Rather, the queue registers 
with the printer to receive notification upon authentica- 
tion of the intended recipient (step S607) and then re- 
turns to step S603. This job is not released and printed 
until the print queue is notified that the recipient holding 
the proper identification information for print job 1 008 
has been authenticated at the printer. 
[0100] The foregoing examples describe the use of a 
smart card to gain control over the printer's print capa- 
bilities. However, as previously mentioned, another de- 
vice such as a keypad or biometric device could also be 
utilized to accomplish the same function. The foregoing 
examples also describe the invention in an arrangement 
where a print queue is contained within a server and all 
data is stored in the print server. However, as will be 
described below, embodiments of the present invention 
may be employed in various other arrangements. 
[0101] One alternative arrangement in which an em- 
bodiment of the invention may be employed is depicted 
in Figure 13. As seen in Figure 13, the network may in- 
clude data store 1301 as well as the aforementioned 
print server. The data store may be an additional storage 
medium, such as a hard disk attached to the print server, 
a separate computer having a hard disk forstoring print 
data, or some other type of storage medium. With this 
arrangement, print data submitted from the -sending 
node may be stored in the data store and a reference to 
the stored print data file name and location submitted to 
the print queue. Alternatively, rather than print data be- 
ing submitted from a sending node to the data store as 
part of a print job submission, the print data may reside 
in the data store prior to the print job being submitted 
from the sending node. In this case, the print job sub- 
mitted to the queue would merely provide a reference 
to the print data storage location. 
[0102] The operation of this arrangement works sim- 
ilarly to the above examples. In one difference, once the 
print job is released to print (step S623), a determination 
is made whether the print job is a print by reference print 
job in step S626. Since the print job is a print by refer- 
ence, the print queue utilizes the print data storage ref- 
erence location to retrieve the stored print data (step 
S627) and then submits the retrieved print data to the 
printer. 

[0103] The network depicted in Figure 1 3 may be the 
Internet. Once the print job has been released to print, 
the print queue retrieves the print data overthe Internet 
from the data store and processes it to be printed. Ac- 
cordingly, in order for the print queue to retrieve print 
data overthe Internet, the print server is provided with 
the ability to access the Internet through FTP/HTTP cli- 
ent 395 or 495 shown in Figures 3 and 4. 
[0104] The invention is also not limited to an arrange- 
ment in which the queue is contained within a print serv- 
er. Rather, the queue may be contained within the printer 
itself, or within a personal computer or other device. 
Such an arrangement may provide a system similar to 
that shown in Figure 14. In Figure 14, sending nodes 
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141 0 communicate with printer 1450 over network 1 400. 
Attached to printer 1450 is smart card reader 1455. The 
queue may be provided in the printer in a storage disk 
such as queue 31 5 in printer memory 51 shown in Figure 
3. Alternatively, the queue may be provided in fixed disk 
280 of computer 10. The operation of this arrangement 
would be similar to that described above with one differ- 
ence being that the printer does not need to communi- 
cate over a network to an external queue in a print serv- 
er. Rather, the host computer and the printerthemselves 
communicate to provide the functionality of the inven- 
tion. 

[0105] Moreover, the present invention is not limited 
to an arrangement of a computer (sending node) and 
printer communicating over a network. In this regard, 
Figure 15 depicts an arrangement where the present in- 
vention is employed in a facsimile model. To employ the 
present invention in a facsimile model, a facsimile ma- 
chine capable of providing the recipient's unique identi- 
fication information at the sending facsimile is utilized. 
Therefore, the sending facsimile may also utilize the 
smart card interface as described above. At the receiv- 
ing end, the facsimile machine stores and defers printing 
of facsimile transmissions similar to the printer model 
described above. Therefore, the embodiment of the 
present invention of controlling printout operations of 
facsimile transmissions stored in a queue is performed 
in the same manner as the printer model described 
above. 

[0106] In a further aspect of the invention, ratherthan 
opting to print all authenticated print jobs, a mechanism 
for the recipient to selectively choose which print jobs to 
print may be provided for. This option refers to user se- 
lection steps S622, S624 and S625 of Figure 6D. One 
way to accomplish the foregoing may be to provide a 
display at the printer, such as display 1700 of printer 
1 750 shown in Figure 1 7A. The printer may also be pro- 
vided with a keypad 1720 to allow the recipient to 
choose from among various options shown on the dis- 
play. Alternatively, the display itself may be a touch pan- 
el display, thereby eliminating the need for a keypad. 
[0107] Figure 17B depicts one example of display 
screen 1700. As seen in Figure 17B, once the recipient 
is authenticated, the display may provide an indication 
to the recipient that he has been authenticated (1701) 
and also provide him with the option to either select a 
print job to print (1702) or to print all print jobs pending 
in the queue for him (1703). In this aspect of the inven- 
tion, the recipient is authenticated in the same manner 
as described above. However, once the recipient is au- 
thenticated anc opts to select a print job to print, all print 
jobs in the queue are deferred until the recipient selects 
which print jobs to print. If the recipient selects option 
1703 (opting to print all of his authenticated print jobs), 
then as described above, all authenticated print jobs 
pending in the queue, as well as those received by the 
queue while the recipient maintains control over the 
printer, are processed and printed out in the same man- 



ner as described above. 

[0108] However, in the case where the recipient se- 
lects option 1702 (select a print job to print correspond- 
ing to step S624), then additional options may be pro- 

s vided to the recipient on display 1 700. As shown in Fig- 
ure 17C, one further option is option 1704 to select a 
print job from among those pending in the queue. In a 
case where this option is selected, a listing of the print 
jobs pending in the queue is provided on the display. 

10 The listing may include all print jobs that are matched 
with the recipient's identification information, or may list 
all print jobs pending in the queue, including normal and 
authenticated print jobs but preferably not jobs intended 
for other recipients. From this listing, the recipient can 

15 select one or more print jobs to print, either one of his 
normal print jobs or one of his authenticated print jobs. 
These print jobs are then released and processed in 
step S625. As long as the recipient maintains control 
over the printer, all print jobs in the queue are deferred 

20 until they are either released by the recipient selecting 
them from the display or the recipient relinquishes con- 
trol of the printer. 

[0109] As a result of the foregoing, if the queue con- 
tains five authenticated print jobs all belonging to the 
25 recipient and numbered 1 through 5 respectively, the re- 
cipient can choose to only print authenticated -print job 
5 without printing authenticated print jobs 1 to 4. He can 
then return at a later time and print any of print jobs 1 to 
4. 

30 [0110] Another option shown in Figure 1 7C is for the 
recipient to select a print job from a network (1705), i.e. 
a location on a network other than the print queue. The 
network may be any type of network, including a WAN 
(Wide Area Network), a LAN (Local Area Network), an 

35 intranet, the Internet, a USB, 1394, home network, etc. 
Print data may be browsed and retrieved from the Inter- 
net, an intranet, or e-mail using a method similar to that 
disclosed in co-pending U.S. Application 09/465,835, 
entitled "System For Retrieving And Printing Network 

40 Documents," filed December 1 7, 1 999, corresponding 
to EP-A-1109113thecontents of which are incorporated 
by reference as set forth in full herein. In this embodi- 
ment however, the front panel interface of the device 
serves as the web browser described in Application 

45 09/465,835. Upon selecting option 1 705, additional op- 
tions as shown in Figure 1 7D may be displayed. 
[011 1] It should be noted however, that in the current 
aspect of the invention, i.e. printing data over the Inter- 
net or an intranet, the print jobs downloaded are not nec- 

50 essarily authenticated print jobs in the sense that au- 
thenticated print jobs would ordinarily be provided with 
the recipient's authentication information. In more detail, 
in each of the previous aspects print jobs were submit- 
ted from a sending node to a print queue over a network. 

55 As such, the recipient's identification information was 
provided at the sending node in order for the print jobs 
to be identified as authenticated print jobs. In order to 
print those print jobs, the recipient had to be authenti- 
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cated at the printer and then the authenticated print jobs 
were printed out. 

[01 12] In the present aspect however, the print job is 
not being submitted by a sending node but rather is be- 
ing requested from the printer itself after the recipient 
has been authenticated and while he maintains control 
of the printer. Therefore, the printer already knows who 
the authenticated recipient is and that the recipient has 
control of the printer. Therefore, all print jobs printed 
over the Internet or an intranet are released and printed 
once they are downloaded because the recipient has 
already been authenticated and has control of the print- 
er. 

[0113] Another aspect of the invention concerns ac- 
curate accounting of resources used in printing opera- 
tions, such as the amount and type of paper used and 
the amount of ink used. In more detail, accurate ac- 
counting of resources may be desired in order to bill a 
particular department within an office or a particular per- 
son using the resources. Accounting is most commonly 
accomplished by software in a print server that tracks 
print jobs based on who submitted the print job. Howev- 
er, this accounting method does not accurately reflect 
the actual recipient who is using the resources, but only 
identifies the sender or sending department. 
[0114] Therefore, the present invention provides for 
utilization of an accounting application program in con- 
junction with the authenticated recipient's unique iden- 
tification information. In the present aspect, once the re- 
cipient has been authenticated, the printer resources 
utilized during the printing operations are tracked by the 
printer (step S629). The printer then correlates the 
tracked resources with the authenticated recipient's 
identification information (step S630). The tracked data 
may then be submitted by the printer to a device that 
contains an accounting application program, such as 
print server 40. Alternatively, the printer may register 
with the print server or another device utilizing the ac- 
counting program and the print server or device may ac- 
cess the printer periodically to. collect the accounting in- 
formation. An accounting application program in the 
print server then utilizes this information to match re- 
sources utilized during all printing operations while the 
recipient has control of the printer and to bill the depart- 
ment that the recipient belongs to. In this manner, the 
accounting application can track the resources to the 
person actually utilizing them, rather than matching 
them to a sender who may or may not be utilizing them. 
[01 1 5] The foregoing provided a description of obtain- 
ing exclusive control in conjunction with authentication 
where exclusive control was not obtained until the re- 
cipient had been successfully authenticated. The follow- 
ing describes a process for obtaining exclusive control 
in conjunction with authentication, but with exclusive 
control being granted before the recipient is successfully 
authenticated. 

[0116] Generally, the process is similar to that de- 
scribed above with the regard to Figures 6A to 6D. How- 



ever, some changes in the process steps are required 
and therefore Figure 6F is substituted for Figure 6C. Ac- 
cordingly, the process steps depicted in Figures 6A and 
6B apply equally to both a case where exclusive control 
s is obtained only afterthe recipient has been successfully 
authenticated and where exclusive control is obtained 
before the recipient has been successfully authenticat- 
ed. As such, a description of Figures 6A and 6B will not 
be repeated here, but rather, only Figure 6F will be dis- 
cussed. 

[0117] As seen in Figure 6F, step S609 is different 
from step S609 of Figure 6C. In Figure 6C, the recipient 
merely presented his identification information and then 
the printerprocessed the information to perform authen- 
tication in steps S61 0 to S61 5. After the recipient was 
successfully authenticated in Figure 6C, then in step 
S617 all print jobs in the print queue were deferred. 
Therefore, exclusive control in Figure 6C was not ob- 
tained until step S617. In Figure 6F, however, when the 
recipient presents his identification information to begin 
the authentication process (step S609), the printer si- 
multaneously provides an indication to the queue that it 
is busy, thereby deferring all print jobs pending in the 
print queue. Accordingly, exclusive control is obtained 
in Figure 6F in step S609 rather than step S61 7. 
[0118] In this embodiment, since the recipient gains 
exclusive control before a successful authentication 
process, a mechanism to release exclusive control in 
the event of an authentication failure is provided for. Ac- 
cordingly, if any of steps S61 0 to S615 (the authentica- 
tion process steps) result in an authentication (or au- 
thorization) failure, then in step S61 6 the recipient is no- 
tified of the failure and exclusive control is automatically 
relinquished. Thus, in comparison to Figure 6C, step 
S61 6 in Figure 6F includes the additional process of re- 
leasing all deferred print jobs. 

[0119] If the recipient is successfully authenticated in 
steps S61 0 to S615, then in step S617, the printer noti- 
fies the print queue that the recipient has been authen- 
ticated, Therefore, in contrast to Figure 6C, in Figure 6F 
step S617 excludes the process of deferring the print 
jobs in the print queue since this process was previously 
performed in step S609. 

[0120] The remaining process steps of Figure 6F 
(steps S61 8 to S621 ) are the same as those described 
above with regard to Figure 6C and therefore the de- 
scription of these steps will not be repeated here. 
[0121] As can readily be seen from the foregoing, ex- 
clusive control can be obtained in conjunction with au- 
thentication, either before the recipient is successfully 
authenticated, with control being automatically relin- 
quished in the event of an authentication failure, or only 
after a successful authentication process has been per- 
formed. Although the foregoing focused on obtaining ex- 
clusive control in conjunction with authentication, as 
stated above, exclusive control can also be obtained in 
the absence of authentication. This process will now be 
described in more detail. 
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[0122] Generally, the process of obtaining exclusive 
control in the absence of authentication is similar to that 
described above with regard to Figures 6A to 5D (em- 
bodiment 1), and Figures 6A, 6B, 6D and 6F (embodi- 
ment 2). However, process steps involving authentica- 
tion are omitted. 

[0123] Figure 16 is a flowchart of process steps for 
obtaining exclusive control in the absence of authenti- 
cation. In step S1609, the recipient performs a process 
to gain exclusive control. As described above, any type 
of process to gain exclusive control could be employed 
and the invention is not limited to any particular type of 
process. For instance, the recipient could press a button 
on a control panel of the printer to gain control, or he 
could enter a usemame. In the latter case, an optional 
process could be performed to confirm whether the re- 
cipient's usemame is contained in a listing of authorized 
users. If a match is found, the user would be permitted 
to gain control. If a match is not found, then the user 
would be notified of a failure. These optional steps are 
not depicted in Figure 1 6, but would be performed after 
step S1609 and would be similar to steps S614, S615 
andS616of Figure 6C. Assuming that the recipient per- 
forms a process to gain control that does not involve au- 
thorization (such as pressing a button), flow proceeds 
to step S1610. 

[0124] In step S1 61 0, once the recipient performs the 
process to gain exclusive control, all print jobs pending 
in the print queue, as well as those received by the print 
queue while the recipient maintains control, are deferred 
from being printed. Again, deferring the print jobs may 
be performed by any process as described above. 
[0125] In step S1611 , the recipient performs a proc- 
ess to select a print job to print. The process may be any 
of those described above with regard to Figures 1 7A to 
1 7D. That is, the recipient may select a print job pending 
in the print queue, or he may select a file from a remote 
storage location over a network, including the Internet 
or an intranet. Once the recipient performs the process 
to select the file or print job, he submits the print job for 
printing by the printer (step S1612). 
[0126] Steps S1 613 to S1 61 7 are the same as steps 
S626 to S630, respectively, of Figure 6D. Therefore, if 
any of the print jobs are print by reference, the print data 
is retrieved from the storage location, and printing re- 
sources utilized in printing the print job are tracked and 
correlated to the recipient. It should be noted that steps 
S1 61 6 and S161 7 can only be performed where the re- 
cipient has been identified. That is, in order for the print- 
ing resources to be correlated to the recipient, the re- 
cipient has to provide some identification information (e. 
g. usemame) to the printer in step S1609. Therefore, if 
the recipient merely presses a button, he is an anony- 
mous recipient and any tracked resources could not be 
correlated to him. In this case, steps S1 61 6 and S1 61 7 
could be omitted. 

[0127] Once the print job has been printed, a deter- 
mination is made whetherthe recipient has relinquished 



control (step S1618). Again, relinquishing control could 
be performed by any of the processes described above 
and the invention is not limited to any particular process. 
If the recipient maintains control, flow returns to step 
5 S1611 forthe recipient to select another print job to print. 
In this regard, the printer waits forthe recipient to select 
another print job in step S1611 and remains busy for 
other print requests (i.e. the print jobs pending in the 
queue remain deferred) until the recipient manually re- 
io linquishes control. Of course, a timeout mechanism 
could also be employed so that after a set length of in- 
activity by the user, the printer would automatically re- 
linquish control. Once control has been relinquished, 
then all of the deferred print jobs in the queue are re- 
's leased and the printer resumes normal printing opera- 
tions (step S1 61 9). 

[0128] The invention has been described with partic- 
ular illustrative embodiments. It is to be understood that 
the invention is not limited to the above-described em- 
20 bodiments and that various changes and modifications 
may be made by those of ordinary skill in the art without 
departing from the spirit and scope of the invention. 



25 Claims 

1 . A method for obtaining exclusive control of a print- 
ing device by a recipient to print data intended for 
the recipient, the method comprising the steps of: 

30 

authenticating the recipient; 
providing the recipient exclusive control of the 
printing device's print capabilities after the re- 
cipient has been authenticated; and 
35 temporarily deferring print data not intended for 

the recipient from being printed and printing 
print data intended forthe recipient during a pe- 
riod in which the recipient has exclusive control 
of the printing device's print capabilities. 

40 

2. A method according to Claim 1 , wherein the print 
data not intended forthe recipient is deferred by the 
printing device providing a busy indication. 

45 3. A method according to Claim 1 , wherein the print 
data not intended forthe recipient is deferred by be- 
ing temporarily stored and a reference to a print da- 
ta storage location is sent to a print queue until the 
recipient relinquishes control of the printing device's 

so print capabilities. 

4. A method according to Claim 1 , wherein the print 
data not intended for the recipient is deferred by be- 
ing rejected by the printing device. 

55 

5. A method according to Claim 1 , wherein, once the 
recipient has exclusive control of the printing de- 
vice's print capabilities, the recipient selects which 
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print jobs to print. 

6. A method according to Claim 1 , wherein the print 
data intended forthe recipient is stored in a location 
other than in a print queue and a reference to the 
stored print data location is provided to the print 
queue. 

7. A method according to Claim 1 , wherein the recip- 
ient gains exclusive control of the printing device's 
print capabilities by being authenticated utilizing a 
smart card device. 

8. A method according to Claim 1 , wherein the recip- 
ient gains exclusive control of the printing device's 
print capabilities by being authenticated utilizing a 
keypad and entering a user code, a personal iden- 
tification number, or a password. 

9. A method according to Claim 1 , wherein the recip- 
ient gains exclusive control of the printing device's 
print capabilities by being authenticated utilizing a 
biometric device. 

10. A method according to Claim 1, wherein said step 
of providing exclusive control of the printing device's 
print capabilities includes verifying that the recipient 
is authorized to obtain exclusive control of the print- 
ing device's print capabilities. 

11. A method according to Claim 1 further comprising 
the steps of: 

tracking printing device resources utilized in 
printing data during the period in which the re- 
cipient has exclusive control of the printing de- 
vice's print capabilities: and 
correlating the tracked resources to the authen- 
ticated recipient. 

12. A method according to Claim 11, wherein the 
tracked resources comprise at least one of a 
number of printed pages, recording medium type, 
and amount of ink, toner or other medium utilized in 
printing the data. 

13. A method according to Claim 5, wherein, once the 
recipient has gained exclusive control of the printing 
device's print capabilities, the recipient selects print 
data to print from a network. 

14. An apparatus for printing images, comprising: 

an authentication device that authenticates a 
recipient; 

a print engine controlling printing operations of 
the apparatus; 

a print queue temporarily storing and buffering 



print data submitted to the apparatus for print- 
ing; and 

control means for permitting a recipient to con- 
trol print capabilities of the apparatus after the 
5 recipient has been authenticated, 

wherein, after the recipient is authenticated, 
print data not intended forthe recipient is temporar- 
ily deferred from being printed and print data intend- 
10 ed for the recipient is printed out during a period in 
which the recipient has control over the apparatus' 
print capabilities. 

15. An apparatus according to Claim 14, wherein the 
15 print data not intended for the recipient is deferred 

by the apparatus providing a busy indication. 

16. An apparatus according to Claim 14, wherein the 
print data not intended for the recipient is deferred 

20 by being temporarily stored and a reference to a 
print data storage location being sent to a print 
queue until the recipient relinquishes control of the 
apparatus' print capabilities. 

25 17. An apparatus according to Claim 14, wherein the 
print data not intended for the recipient is deferred 
by being rejected by the apparatus. 

18. An apparatus according to Claim 14 further com- 
30 prising a print job selection device, wherein, once 
the recipient has control of the apparatus' print ca- 
pabilities, the recipient selects which print jobs to 
print. 

35 19. An apparatus according to Claim 14, wherein the 
print data intended for the recipient is stored in a 
location other than in the print queue and a refer- 
ence to the stored print data location is provided to 
the print queue. 

40 

20. An apparatus according to Claim 14, wherein the 
recipient gains control of the apparatus' print capa- 
bilities by being authenticated utilizing a smart card 
device. 

45 

21. An apparatus according to Claim 14, wherein the 
recipient gains control of the apparatus' print capa- 
bilities by being authenticated utilizing a keypad and 
entering a user code, a personal identification 

50 number, or a password. 

22. An apparatus according to Claim 14, wherein the 
recipient gains control of the apparatus' print capa- 
bilities by being authenticated utilizing a biometric 

55 device. 

23. An apparatus according to Claim 14 further com- 
prising: 
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a tracking device that tracks printing resources 
utilized in printing data during the period in 
which the recipient has control over to the ap- 
paratus' print capabilities; and 
a correlating device that correlates the tracked 
resources to the authenticated recipient. 

24. An apparatus according to Claim 23, wherein the 
tracked resources comprise at least one of a 
number of printed pages, recording medium type, 
and amount of ink. toner or other medium utilized in 
printing the data. 

25. An apparatus according to Claim 18, wherein the 
selection device provides an interface with an net- 
work such that once the recipient has gained con- 
trol of the printing device's print capabilities, the re- 
cipient selects print data to print from the network. 

26. Computer-executable process steps for obtaining 
exclusive control of a printing device by a recipient 
to print data intended for the recipient, the compu- 
ter-executable process steps comprising: 

authenticating the recipient; 
providing the recipient exclusive control of the 
printing device's print capabilities after the re- 
cipient has been authenticated; and 
temporarily deferring print data not intended for 
the recipient from being printed and printing 
print data intended forthe recipient during a pe- 
riod in which the recipient has exclusive control 
of the printing device's print capabilities. 

27. Computer-executable process steps according to 
Claim 26, wherein the print data not intended forthe 
recipient is deferred by the printing device providing 
a busy indication. 

28. Computer-executable process steps according to 
Claim 26, wherein the print data not intended forthe 
recipient is deferred by being temporarily stored 
and a reference to a print data storage location be- 
ing sent to a print queue until the recipient relin- 
quishes control of the printing device's print capa- 
bilities. 

29. Computer-executable process steps according to 
Claim 26, wherein the print data not intended forthe 
recipient is deferred by being rejected by the print- 
ing device. 

30. Computer-executable process steps according to 
Claim 26, wherein, once the recipient has exclusive 
control of the printing device's print capabilities, the 
recipient selects which print jobs to print. 

31 . Computer-executable process steps according to 



Claim 26, wherein the print data intended for the re- 
cipient is stored in a location other than in a print 
queue and a reference to the stored print data loca- 
tion is provided to the print queue. 

5 

32. Computer-executable process steps according to 
Claim 26, wherein the recipient gains exclusive con- 
trol of the printing device's print capabilities by being 
authenticated utilizing a smart card device. 

10 

33. Computer-executable process steps according to 
Claim 26, whereinthe recipient gains exclusive con- 
trol of the printing device's print capabilities by being 
authenticated utilizing a keypad and entering a user 

15 code, a personal identification number or a pass- 
word. 

34. Computer-executable process steps according to 
Claim 26, wherein the recipient gains exclusive con- 

20 trol of the printing device's print capabilities by being 
authenticated utilizing a biometric device. 

35. Computer-executable process steps according to 
Claim 26, wherein said step of providing exclusive 

25 control of the printing device's print capabilities in- 
cludes verifying that the recipient is authorized to 
obtain exclusive control of the printing device's print 
capabilities. 

so 36. Computer-executable process steps according to 
Claim 26 further comprising the steps of: 

tracking printing device resources utilized in 
printing data during the period in which the re- 
35 cipient has exclusive control of the printing de- 

vice's print capabilities; and 
correlating the tracked resources to the authen- 
ticated recipient. 

40 37. Computer-executable process steps according to 
Claim 36, wherein the tracked resources comprise 
at least one of a number of printed pages, recording 
medium type, and amount of ink, toner or other me- 
dium utilized in printing the data. 

45 

38. Computer-executable process steps according to 
Claim 30, wherein, once the recipient has gained 
exclusive control of the printing device's print capa- 
bilities, the recipient selects print data to print from 

so a network. 

39. A method of printing images on a printing device, 
comprising the steps of: 

55 obtaining control overprinting operations of the 

printing device; and 

performing a process to print out an image by 
the printing device during a period of control 
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over the printing device. 

40. A method according to Claim 39, wherein the ob- 
taining control step comprises authenticating a re- 
cipient. 

41 . A method according to Claim 40, further comprising 
the steps of: 

tracking printing device resources utilized dur- 
ing the performing step; and 
correlating the tracked resources to the authen- 
ticated recipient. 

42. A method according to Claim 41, wherein the 
tracked resources comprise at least one of a 
number of printed pages, recording medium type, 
and amount of ink, toner or other medium utilized in 
the performing step. 

43. A method of controlling printing operations of a 
printing device, comprising the steps of: 

obtaining control over the printing operations of 
the printing device; and 
maintaining control over the printing operations 
until control is manually relinquished by a recip- 
ient who has obtained control. 

44. A method according to Claim 43, wherein the recip- 
ient performs a process to access print data to print 
out an image by the printing device while control is 
maintained over the printing device. 

45. A method according to Claim 39 or 43, wherein the 
obtaining control step comprises deferring of all 
print jobs submitted to a print queue for printing by 
the printing device. 

46. A method according to Claim 39 or 43, wherein the 
obtaining control step comprises control over all 
communication interfaces of the printing device. 

47. A method according to Claim 39 or 43, wherein the 
obtaining control step comprises control over net- 
work access to the printing device. 

48. A method accordingto Claim 39 or43, wherein con- 
trol over the print operations comprises control over 
print engine operations of the printing device. 



51. A method according to Claim 44, wherein the per- 
forming step comprises performing a copying oper- 
ation. 

s 52. A method according to Claim 44, wherein the per- 
forming step comprises performing a facsimile op- 
eration. 

53. A method according to Claim 43, wherein the ob- 
10 taining control step comprises authenticating a re- 
cipient. 

54. A method according to Claim 53, wherein the recip- 
ient obtains control before the recipient is authenti- 

15 cated. 

55. A method according to Claim 53, wherein the recip- 
ient obtains control afterthe recipient is authenticat- 
ed. 

20 

56. A method according to Claim 53, further comprising 
the steps of: 

the authenticated recipient performing a proc- 
25 ess to print out an image by the printing device 

while control is maintained overthe printing de- 
vice; 

tracking printing device resources utilized dur- 
ing the performing step; and 
30 correlating the tracked resources to the authen- 

ticated recipient. 

57. A method according to Claim 56, wherein the 
tracked resources comprise at least one of a 

35 number of printed pages, recording medium type, 
and amount of ink, toner orothermedium utilized in 
the performing step. 

58. A printing apparatus, comprising: 

40 

a print engine controlling printing operations of 
the apparatus; 

a control device for permitting a recipient to ob- 
tain control over the printing operations of the 
45 apparatus; and 

a print data access device for performing a 
process to access print data to be printed by 
the printing apparatus. 

so 59. A printing apparatus, comprising: 



49. A method according to Claim 44, wherein the per- 
forming step comprises accessing print data over a 
network to be printed by the printing device. 

50. A method according to Claim 45, wherein the per- 
forming step comprises accessing at least one print 
job in the print queue of the printing device. 



a print engine controlling printing operations of 
the apparatus; 

a control device for permitting a recipient to ob- 
tain control over the printing operations of the 
apparatus and to maintain control until a time 
when the recipient relinquishes control; and 
a relinquishing device for relinquishing control 
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over the apparatus' printing operations. 

60. A printing apparatus according to Claim 59, further 
comprising a print data access device for perform- 
ing a process to access print data to be printed by 
the printing apparatus during a period in which the 
recipient has control over the printing device. 

61. A printing apparatus according to Claim 58 or 59, 
wherein the control device defers printing of all print 
jobs submitted to a print queue of the apparatus. 

62. A printing apparatus according to Claim 58 or 59, 
wherein the control device controls all communica- 
tion interfaces of the apparatus. 

63. A printing apparatus according to Claim 58 or 59, 
wherein the control device controls network access 
to the apparatus, 

64. A printing apparatus according to Claim 58 or 59, 
wherein the control device controls the print engine. 

65. A printing apparatus according to Claim 58 or 60, 
wherein the access device performs a process to 
access print data over a network. 

66. A printing apparatus according to Claim 58 or 60, 
wherein the access device performs a process to 
access at least one deferred print job in a print 
queue. 

67. A printing apparatus according to Claim 58 or 60, 
wherein the access device performs a copying 
process. 

68. A printing apparatus according to Claim 58 or 60, 
wherein the access device performs a facsimile 
process. 

69. A printing apparatus according to Claim 58 or 59, 
wherein the control device comprises an authenti- 
cation device for performing an authentication proc- 
ess of the recipient. 

70. A printing apparatus accordingto Claim 69, wherein 
the control device permits the recipient to obtain 
control before the recipient is authenticated. 

71 . A printing apparatus according to Claim 69 , wherein 
the control device permits the recipient to obtain 
control after the recipient is authenticated. 

72. A printing apparatus according to Claim 69, further 
comprising: 

a tracking device that tracks printing resources 
utilized in printing data during a period in which 



the recipient has control of the printing opera- 
tions; and 

a correlating device that correlates the tracked 
resources to the recipient. 

5 

73. Aprinting apparatus according to Claim 72, wherein 
the tracked resources comprise at least one of a 
number of printed pages, recording medium type, 
and amount of ink, toner or other medium utilized in 

io printing the data. 

74. Computer-executable process steps forprinting im- 
ages on a printing device, comprising the steps of: 

15 obtaining control over printing operations of the 

printing device; and 

performing a process to print out an image by 
the printing device during a period of control 
over the printing device. 

20 

75. Computer-executable process steps according to 
Claim 74, wherein the performing step comprises 
accessing at least one print job in the print queue. 

25 76. Computer-executable process steps according to 
Claim 74, wherein the obtaining control step com- 
prises authenticating a recipient. 

77. Computer-executable process steps according to 
30 Claim 76, further comprising the steps of: 

tracking printing device resources utilized dur- 
ing the performing step; and 
correlating the tracked resources to the recipi- 
35 ent. 

78. Computer-executable process steps according to 
Claim 77, wherein the tracked resources comprise 
at least one of a number of printed pages, recording 

40 medium type, and amount of ink, toner or other me- 
dium utilized in the performing step. 

79. Computer-executable process steps for controlling 
printing operations of a printing device, comprising 

45 the steps of: 

obtaining control over the printing operations of 
the printing device; and 
maintaining control over the printing operations 
so until control is manually relinquished by a recip- 

ient who has obtained control. 

80. Computer-executable process steps according to 
Claim 79, wherein the recipient performs a process 

55 to access print data to print out an image by the 
printing device while control is maintained over the 
printing device. 
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81. Computer-executable process steps according to 
Claim 74 or 79, wherein the obtaining control step 
comprises deferring of all print jobs submitted to a 
print queue for printing by the printing device. 

82. Computer-executable process steps according to 
Claim 74 or 79, wherein the obtaining control step 
comprises control over all communication interfac- 
es of the printing device. 

83. Computer-executable process steps according to 
Claim 74 or 79, wherein the obtaining control step 
comprises control over network access to the print- 
ing device. 

84. Computer-executable process steps according to 
Claim 74 or 79, wherein control over the print oper- 
ations comprises control over print engine opera- 
tions of the printing device. 

85. Computer-executable process steps according to 
Claim 74 or 80, wherein the performing step com- 
prises accessing print data over a network to be 
printed by the printing device. 

86. Computer-executable process steps according to 
Claim 74 or 80, wherein the performing step com- 
prises accessing at least one print job in a print 
queue of the printing device. 

87. Computer-executable process steps according to 
Claim 74 or 80, wherein the performing step com- 
prises performing a copying operation. 

88. Computer-executable process steps according to 
Claim 74 or 80, wherein the performing step com- 
prises performing a facsimile operation. 

89. Computer-executable process steps according to 
Claim 74 or 79, wherein the obtaining control step 
comprises authenticating a recipient. 

90. Computer-executable process steps according to 
Claim 89, wherein the recipient obtains control be- 
fore the recipient is authenticated. 

91. Computer-executable process steps according to 
Claim 89, wherein the recipient obtains control after 
the recipient is authenticated. 

92. Computer-executable process steps according to 
Claim 89, further comprising the steps of: 

the recipient performing a process to access 
print data to print out an image by the printing 
device while control is maintained over the 
printing device; 

tracking printing device resources utilized dur- 



ing the performing step; and 
correlating the tracked resources to the recipi- 
ent. 

5 93. Computer-executable process steps according to 
Claim 92, wherein the tracked resources comprise 
at least one of a number of printed pages, recording 
medium type, and amount of ink, toner or other me- 
dium utilized in the performing step. 

10 

94. A method according to Claim 1 , 13 or 49, wherein 
the network is an Internet or an intranet. 

95. An apparatus according to Claim 25 or 65 to 74, 
is wherein the network is an Internet or an intranet. 



96. Computer-executable process steps according to 
Claim 38 or 85, wherein the network is an Internet 
or an intranet. 

20 

97. A method according to Claim 1 , wherein the recip- 
ient gains exclusive control of the printing device's 
print capabilities by being authenticated utilizing a 
hardware token. 

25 

98. An apparatus according to Claim 14, wherein the 
recipient gains exclusive control of the printing de- 
vice's print capabilities by being authenticated uti- 
lizing a hardware token. 

30 

99. Computer-executable process steps according to 
Claim 26, wherein the recipient gains exclusive con- 
trol of the printing device's print capabilities by being 
authenticated utilizing a hardware token. 

35 
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